This is Hacker Public Radio episode 4,085 for Friday the 29th of March 2024.
Today's show is entitled, Android User Land Google Assistant GPT.
It is hosted by operator and is about 32 minutes long.
It carries an explicit flag.
The summary is operator tells you how to get past no ADP and blocking a third party APKS.
You are listening to a show from the Reserve queue.
We are airing it now because we had free slots that were not filled.
This is a community project that needs listeners to contribute shows in order to survive.
Please consider recording a show for Hacker Public Radio.
Hello everyone, welcome to another episode of Hacker Public Radio with your operator.
Today we are talking about new Android phone and how I have set it up and how it is different
to my last one.
So we are going to be talking about kind of a jail breaking but being able to run any
application you want on a at least Android device and then also how I am handling Google
Assistant now using CHATGPT.
So if you want a better Google Assistant or if you want to have complete control over your
entire device or have basically a micro computer inside of your Android computer, your
Android phone, listen up.
So first thing to talk about is the old setup we have with work was to profile setup.
So the first one was the system profile 0 or whatever and then I think it was a profile
9 was my personal profile and the idea is that the work in the personal or separate and
that you could have apps on each one and whatever you could manage the app stores separately.
And essentially completely close out and theory all the tasks for your work profile when
your personal wasn't on or when you are not working you can turn off the work profile
and that will kill all the apps for the work profile.
And from what I can tell they actually did work.
So I had to log back into stuff after we get into whatever.
So anyways that is how it was set up before.
It was kind of weird the way we had emails through exchange but it was a weird exchange
Google thing so Gmail client was my client for our directory outlook.
So everything was kind of broken out look was the previous thing and then I guess they
were locking things down and decided to go this route and try to see if it would work
and it really didn't work.
So they moved back to a different model where you just have one profile and there's no
ADB debugging for Android and there's also no third party ADB case along with all the other
security profile stuff like locking standards and stuff like that.
So first things first that limits a lot of what you can do.
If you can't do ADB then there's a lot of stuff you can't do with the phone as far as
enhancements, getting things what you want.
Same thing for third party applications.
If you can't start a stall third party ADB case things start to get to get complicated or
you start getting a trail to that into that ecosystem of Android.
So start to think about what can I do.
Chances are I try to do some silly stuff like load ADK through another app that was already
installed.
So you have some janky work app and maybe you can man the middle of some kind of method
in which to execute arbitrary code through your work app and gain like system level access.
So the idea would be and I still haven't done any research on this and I'm not an Android
Pintester by any means but the idea would be to get hold of one of those work applications.
Inspect that traffic debug it understand how to get in between it and find a way to get
to the information.
So if there's no SSL at some point, that's an easy way to get out.
But even there I think a third party app can't install third party apps unless it's enabled
in the back end.
So you'd have to basically compromise like Maz 360 or something and that's probably not
going to happen.
So I look at that and said there's no way I'm going to be able to find some like OD with
you know and you know the play store or Maz 360 here or something.
So I gave up and then I said okay what else can I do?
I know I have arbitrary code execution.
I know I can execute whatever I want on this device because that's just inherently how
it's set up.
There's no application.
I can run whatever app I want.
It just so happens that the apps that I can run are in as closed ecosystem but that's
not to say I can't create you know a shell script and run that or create some other arbitrary
code somewhere on the system and execute stuff.
So then I start talking about this thinking about oh well I know they have like the external
and the whatever they call it the emulators or whatever terminal emulators for Android.
Let me just fire one of those up and see if I can get a like a tapian you know install
going and have a terminal and I can get everything I need from there and I don't remember
the name of it but that's one I had used before but it's a popular terminal and you
can have like devian like packages and I started to mess with that and it kept warning me
that it was old and then used to be updated and you can't do this can't do that.
Oh man it was all kind of old and black data and it said oh we'll use a new version that's
not on the play store.
Well that's not an option for me because again right we can't install for any applications.
So started to back up and say okay well now that I sort of have arbitrary code execution
what can I look in and I knew there was way back in APK on the app store they could
let you install different distributions and run you know other distros like Cali or
whatever.
I see you know what I wonder what the scene looks like now for that it's probably kind
of fleshed out and chits and it actually is.
So there's a app on the app store for Android called wow I don't remember the name of it
it is called like you might know it's here and oh that's on a hacking list user land.
So user land is basically a way to start up other distributions within Android.
They call it a let's see they don't even explain what it is here but anyways it's a way
to run several different distributions within Android and there's other ones like you
know any later that will let you do same type of thing so your options here are within
user land.
Let me bring it up here on my phone here.
Alpine arch devian kelly bun to Firefox get idle while Python idle I guess shell VS code
somehow.
Thunderbird I guess VS codes through whatever you know whatever you can run mono which you
can run Windows you know BLLs or VB whatever code inside of Linux Thunderbird games
adventures or it's a couple of math things interestingly gimp in escape and lee prey
office so you can pretty much install whatever you want let's see you get one of these
going so my intention was to create like a devian tabian instance and basically you
use that to launch whatever I wanted my mean requirement and my only requirement so
far on Android at least has been that I would like to download YouTube videos and there's
no way to do that without a third party APK or a command line version of YouTube DL or YouTube
downloader whatever so that's what I realized I can use this whole full blown devian
image essentially to do whatever I want now I will say I would probably just stay in the
command line the UI for me at least seemed pretty crashing I think a minimalist UI might be
an option there but as soon as you start updating apps and installing things it can get weird
because it tries to do you know like kernel level stuff and it will end up breaking the environment
so you have to be careful with what you install and then reboot check to see stuff everything
still works and if you have issues you know you have to kind of roll back figure out how to
see if there's been dependencies structure works and work around those different dependencies
but the idea there is now I have a full blown devian UI that I can click around with at least
for a little bit and I can run YouTube VL and a command line if I want to download a YouTube
video on my phone so that's how I handled that it's quite interesting I actually plugged it into
the computer plugged it into a docking station and was able to use my keyboard mouse screen
actually not a docking station but I plugged it directly into the HDMI and then I plugged the
watch there's a there's a cable you can get this a USB-C to USB and HDMI and charge port
so these intern Nintendo switches is available many a dongle so the inputs USB-C the output
is USB ports and HDMI and charge port so you can charge it you can plug keyboard
mouse into it and then you can plug HDMI into it so basically turns your phone into a portable
workstation which we're not too far off from having that I would say you know
if we could get off the train of having Windows boxes it would actually be viable but it's never
going to happen when Windows owns the ecosystem but you can essentially run plug your phone into a
you know keyboard mouse monitor and do whatever you need to do nowadays everything's in the way
by the way so if you're curious but anyways I hope you're learning a lot here because of water
this has been sitting here for God knows how long anyways I think more water
so we have basically an entire deviant environment we do whatever we want to do
work good there the second piece I was missing is I wanted to talk about is really weather
and weather apps and all the garbage comes along with it I like weather underground but I've
never really liked having a weather app because weather is dumb and it's free and there's a
million places to get the weather why to add to you know be bombarded by ads or you know
annoyed by crappy UI whatever so I think I asked or looked on reddit or asked
a chat GPT or charging at this point which I don't think I've done one on
charging and I need to add that in here and let me see
g.com there's going to be a lot of stuff packed in here too
so they call this widget a 5 w i d g e t i f y it's like widget a 5 so basically it makes a
webpage a widget on your desktop and essentially what I did was
but the national service radar they have like a compressed version or like a cell cellular
version I think it's called like when you go in there you can click print or something like that
when it will show you like a printable version of of the radar and things like that so you can
mess around with a UI especially from your phone do it from your phone and it will give you
different UI options but what I have here is a probably little little square one two three
I mean I use a different I use no bad it gives me more icons on the desktop but I have a little
block here uses with the radar and that shows me the radar I can see through the rain patch coming
whatever exactly where my coordinates are they below had that a little bit I have another widget
if I did tell me the the weather for the day for the week so it's like today tonight Friday
Friday night today is obviously Thursday and so it doesn't require an app it doesn't well it
does require the widget if I have which just apparently has ads but unless you go into the
settings of the application or like configure you know the the add the widget itself you're not
going to see any ads so it's very it's very into it I can't even actually get to that I don't even know
how to get to get to that I think that's under configure once you can figure something there might be
ads in here I don't even know so yeah there's I think there's ads in the configuration banners or
whatever so anyways that's how I've got weather without having to have a weather app I used the
Nova desktop thing I paid for the premium version so far everything is free except for Nova gives you some
obviously backing up your backing up your current configuration with Nova and in and changing
the way the essentially the launcher works that's that's what we're replacing here and pretty much
standard stuff I've already talked about there's a I have a Firefox nightly and you can enable
developer mode and then you can create your own developer plug-in sets that will work pretty much on
anything so I have a developer plug-in set set to my own plug-in set and you just need the ID to
it so I there's it's on my YouTube if I remember I'll try to give you a no pet video for Firefox
no ads so it's sponsored block and the ad block here the ad on black custom
a lot number I'm using is one one three three five five zero six and the name of it is
block so that's the only thing you need to know is it's all developer Firefox click the click
to like about section or the icon and the about and it'll unlock the developer and you can go in there
and add a custom add-on collection and that will have also yeah he's the least all right so
so we've got no ads with YouTube player using Firefox because there's no third party you know
YouTube players you can load up because they're so we've got no ads with YouTube no ads we have the
ability to download YouTube videos or any video for that matter through or do whatever we want at all
and it's also importantly enough you can dump combine user land with a VPN and get basically in an
entire invisible instance of your setup essentially invisible I'm about some kind of forensics
to to to work or anybody trying to you know it's vector traffic or whatever the only drawback
there is that you would you know that the files would be playing text on the system itself
but you could probably employ some kind of encryption mounting where you're storing the data
and encrypted drive within the virtual machine so that gets a little techy if it's is there
crash at all the time but there are options for you know you could develop
all of your crypto time you've got your disc anyways so we got YouTube no ads we've got YouTube
everything else is pretty standard now we're 16 minutes in and we're going to talk about
tasker and replacing Google Assistant with not a piece of gargid the requirements are
are at least basically $5 worth of tasker plugins and I will say tasker is for
it's kind of hacky I've used it before I tried to use it for Google voice apparently can use
it for Google but again I think you have to have used the USB debugging to to talk to
Google voice like natively there's a lot of SMS things you can call SMS natively to do things in
Android but Google voice is not an SMS client and an SMS application it's a SMS proxy so it's
not used like an SMS application and your traditional sense going over this other network so
there's a translation there so any kind of application that has to do with SMS or anything trying
to manage Google voice or calls or anything it's kind of hacking with Google voice so if that's kind
of my main problem but if you have standard SMS you can actually do all kinds of crazy stuff
with standard SMS accessibility or whatever SMS app you have you can have hijack all that stuff
so anyways we have some requirements for some engine again is tasker and tasker has been around
forever it's got an interesting UI it's I would say you know what ends up happening is that you
see a plugin for tasker that does what you probably think you might want to do and then you pay
all the money to unlock all the things to get it to do what you want to do and then it sort of
ends up doing what you want to do but it's clunky in some way whereas you know you have to like
for example when mine got squirrely at a reboot and like do you know probably spend a minute to
set up the to make sure everything was running it might be like a battery optimization thing
that I'm missing somewhere but it seems to be kind of clunky so anyways anytime I've ever done
anything with tasker it's always been like a hacky clunky thing but as a proof of concept and to
see what we're going to see sooner rather than later I have replaced the Google Assistant with
a strategy PT essentially or GPT for turbo and that's kind of how it's set up now
so there's not really any notes around that also I'll add the GPT section add how to
you GPT for turbo you know I've been using turbo instead of GPT for because it is wildly
cheaper GPT for as stupid expensive GPT for turbo is reasonable and it's it's just almost as
good as far as I can tell less wordy actually than than GPT for so anyways the first kind of
application one in skull install there's a tasker essentially a tasker opens worse public repository
of tasker apps and profiles and so the first thing I searched was a hay google or
chatty PT and when I searched for that there was one called hay google chatty PT now I will see if I
can go over a kind of the record so the website is tasker.net and then you go to hay google chatty PT
or you just type in chatty PT and you'll get hay google chatty PT let me turn off all my
ad blockers here I'm not seeing the rest of the content I don't don't see it
anyways the the requirements for this and I'll tell you here in a second sorry it doesn't show up
correctly with the browser
okay let's take a little eye frame they put in here so it replaced the hay google chatty PT
tasker.com public thing replace google assistant with chatty PT make sure to carefully read the
instruction below and also the instructions of the other mentioned projects now there's several pieces
of this there is chatty PT there's chatty PT cat task caller and there's hay google command
intercept and then there's auto input which I think that's a polygony at the hay for
so there's like I said it's like $5 to set up and you also need an open API key
I have access to chatty PT for turbo I think they're giving it all away now so it used to be just
chatty PT like GPT 3.5 with an open API access I think they just give it all away but that
takes about a month you go in a request access to GPT 4 and they give it to you but I think they
give it to everybody now I don't know how it works but if you sign up for open API they'll give you
API key and then you look for how to request access to GPT 4 or they probably already have it just
but divide it all now so anyways the first part is getting the plugins installed and set up
make sure each application having to do with tasker is set to not optimize and be always running
you don't want battery optimization or anything like that running when it's trying to do stuff
I haven't had it glitch out on me too much I use it for like three days and then it glitched out
and I just fixed it this morning or last night and it seems to be working okay
I'm having a bit of a problem with the personalities don't seem to work right and I don't know if
I don't have the right prompt or something but so that's some of what's going on
so the import the hay google command intercept this basically the project allows you to get
Google's this commands to tasker so somehow it's able to hook the hay google call the call and then
you can define whether you want to take it over entirely which you don't want or you can have it a
key word set up for it so it can be h google and then when you say the key word which I've
defined as orange it will do whatever it is you need to do so here's I'll do a quick example
hay google and of course it's not working so hay google orange tell me a joke about how bad
google assistant is it's very quick as far as like don't we like to hang out with google assistant
at parties because whenever we ask you to tell a joke it just google's one yeah so that's a
example of a response from chatchipt for a google assistant using the code word orange so it's
h google orange quickly followed by what you want to ask chatchipt to do it's not a two-way
conversation it's a single whatever if you want to have a conversation with it you just go to the
UI and you say you know you click on the UI and say I want to start a conversation you can go back
and forth with it so it's kind of interesting I have used it a few times to ask quick questions so like
for example if I want to know how to do a function of our simspunk sim and say hey how do I
remove duplicates or whatever it was I was asking it and instead of having to search for it
coggy not google khaji i.com i i was able to get the response from the phone and not have to
stop what I was doing to like search for an easy answer to something that is google assistant is not
that it can't do anything smart and i'm not sure how the open API works but i'm pretty sure it has
web access but i'd have to check that um i'm actually we can do that right now so hey google orange
tell me any information security news related to today
i might take a minute for that one sorry i currently don't have the ability to fetch live
news data okay i recommend using new science or search engines for the most interesting
so i actually want to develop um i want to create uh really right the chatty pt part
and make it use khaji because khaji has a khaji search or khaji fast pt um so
i think fast pt is free right now the khaji is like 200 and some of the months or that's
sorry a year um it's basically the same price of chatty pt or gbt plus but it's um all khaji and
all that so anyways um i'll do a thing on khaji i'll do a thing it deserves it's
don't think tasker deserves this one thing okay and also um uh user land all deserves
this one thing but i'm bundling it into two different ones and we're 30 minutes now so
if if you're still with me um yeah i'd appreciate you sticking around so
i've showed you a couple of examples uh it does not have web access which in it makes sense
because you're talking directly to the model you're not it doesn't include search um but there
probably might be easy ways to do that to just change the the get requests because essentially
an API request and i'm sure i can change the open API request to actually use uh web stuff
web search um but maybe just a part of plus i don't know so anyways um um so that's kind of an
easy way to get our our our replace our system with something that's actually useful um again
it would be nice to have uh web site access but this is just to give you an idea of kind of what's
coming with you know assistance and getting them actually do something useful so i hope to find
if i can't find something for a touch of PT um web to give me you know AI plus search is what you want
if i can't get that with um touch of PT just by changing their quest i will try and rewrite
tasker to use um caging because it's essentially all the inputs are there like all i have to do
change up the URL and maybe i keep um more or less so i can look at the traffic going across
using jambory my project on my GitHub look at the traffic going across the network when i'm
doing the request and response and i can see what's getting sent to through the plugin and find
that code or place it with my own URLs and um my own API keys and use caging for that input on
their tasker.com, paskernet.com open public thing i'm i hear the word not yet for android caging
assistant i'm assuming there's an android web based AI assistant coming soon that's
AI and search but i've been Google for you for two three months now um that's a different episode
entirely i could do i'm doing a whole thing on it and there's stuff the codgie i haven't even messed
with yet um but anyways it's been what 40 minutes something like that um not it's only 30 minutes um
and all what's you guys go but um if you're interested in being on the bleeding edge of
replacing Google assistant with something useful um definitely try it out test it out it's like five
bucks and then like maybe like another five bucks for open API uh open API stuff i've used it
i don't know how many times and i've only spent like three dollars across open a open AI and caging
so i've got like you know 10 bucks and you know five bucks a codgie and five bucks and if you
open API uh it's hardly used any of it um it's pretty much it so this is kind of how you get
control over your device um even saw user land um and there's not really much else i need from a you
know uh requirements perspective um the glycol x thing is i use for for managing the audio
is called GLYCOX and it's a compressor and a limiter and equalizer for android so you can
mess with the audio of your headphones do a base boost or based this boost to sound coming out
because my car setup is pretty bad so i have to boost the sound as allows it to go
to get any audio out of the the car system that i've set up so anyways i hope it free
should just sit up feel free to have any questions if you know of any um AI search
replacements assistance for android please let me know um i would pay $30 a month for
you know AI search AI plus search um for android i'm voice based i'm working on
eventually maybe within a year or two when the stuff gets easier i'll have my own uh AI voice
a copy of voice club and then i'll use that with my own fine tune model based on my text messages and my emails
and that will act more like me um yeah so uh also a bonus there's the Myers Briggs personality
test which is you know they've saved so much who uh it was called MBTI it's a personality test and there's
flea letters um and i'm an ENFJ that's echo nancy fox trot the what it's what whatever j is
juice um juliet and then my tritot in the gram is 729 so you can say you can make AI a little bit
more like you especially at least with chapter vt you can say hey in the personality you know
Myers Briggs personality of ENFJ and the tritot in the gram 729 answer this question or deal
with this problem or start a conversation with me um and maybe i'll do one specifically on AI usage
um let me add that i have a crack ton of uh test qt pt right doesn't that one so yeah use it
stuff like professor synapse kaji maybe i'll paint that make that all part of kaji because
the powerful part of kaji's the AI so maybe maybe that'll be kaji and uh AI usage because
we've talked about i've heard talking about AI but i've never heard anybody use it outside of
creating an automated you know uh an automated episode of HPR or something anyways all that she'll go
probably gonna do one on resumes too she's just um i'm doing um resume updating or is it a-a-a-a-a-a-a
using AI to write resumes don't like that so i'll do one on that there should be a fair amount more
of episodes coming so if you don't like to hear my voice or if you do like to hear my voice
and have any constructive criticism to say hey you know you're too rambly or you say and
an om too much or can you slow down can you speed up can you focus more on this thing
any feedback would be great um try dot t on but that's what tends to happen when you start talking
your vocal cords get tired and then it makes it young so anyways appreciate it you'll have
a good time and uh stay frosty take it easy you have been listening to hacker public radio
as hacker public radio does a work today show was contributed by a HPR this night like yourself
if you ever thought of recording podcast click on our contribute link to find out how easy it
hosting for HPR has been kindly provided by an omsthost.com
internet archive and our synced.net
on the satellite stages today show is released on our creative comments
attribution 4.0 international license